gpp_maybe Security update for icedtea-web

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1259

This update for icedtea-web fixes the following issues: - CVE-2019-10181: Fixed an issue where an attacker could inject unsigned code in a signed JAR file (bsc#1142835). - CVE-2019-10182: Fixed a path traversal issue where an attacker could upload arbritrary files by tricking a victim into running a specially crafted application(bsc#1142825). - CVE-2019-10185: Fixed an issue where an attacker could write files to arbitrary locations during JAR auto-extraction (bsc#1142832).

• Release Date
  Apr 19 2022
• References
  Bugzilla: 1142832, 1142835, 1142825
  CVEs: CVE-2019-10185, CVE-2019-10181, CVE-2019-10182
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.4 aarch64

• Packages
  icedtea-web
  Java Web Start implementation

  1.7.2-150100.7.3.1 lock rpm lock src

  icedtea-web-javadoc
  Java Web Start and plugin implementation (API documentation)

  1.7.2-150100.7.3.1 lock rpm

SUSE Package Hub 15.4 ppc64le

• Packages
  icedtea-web
  Java Web Start implementation

  1.7.2-150100.7.3.1 lock rpm lock src

  icedtea-web-javadoc
  Java Web Start and plugin implementation (API documentation)

  1.7.2-150100.7.3.1 lock rpm

SUSE Package Hub 15.4 s390x

• Packages
  icedtea-web
  Java Web Start implementation

  1.7.2-150100.7.3.1 lock rpm lock src

  icedtea-web-javadoc
  Java Web Start and plugin implementation (API documentation)

  1.7.2-150100.7.3.1 lock rpm